$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5.cer File: 761633ef-0fb8-4855-a42b-c999cd4782b5.cer (raw, json) Hash identifier: oIWife35H95iXdoNEsao8J+Mg6W7uPCP0pZ107i0pNw= Subject key identifier: A0:6F:78:7C:3B:42:5D:C9:68:13:88:03:00:C3:1E:2F:C1:49:7A:F5 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848ED6724C37358266E668A3C50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5/761633ef-0fb8-4855-a42b-c999cd4782b5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Feb 2025 21:01:17 +0000 Certificate not after: Mon 24 May 2027 20:01:17 +0000 Subordinate resources: AS: 396040 IP: 66.196.32.0/20 IP: 67.226.217.0/24 IP: 161.199.104.0/24 IP: 162.142.24.0/21 IP: 2605:2040::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ed:67:24:c3:73:58:26:6e:66:8a:3c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 18 21:01:17 2025 GMT Not After : May 24 20:01:17 2027 GMT Subject: CN=761633ef-0fb8-4855-a42b-c999cd4782b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5e:db:1c:fc:78:91:5c:66:0e:42:84:b3:40: a2:ee:69:5c:45:ea:96:0f:d0:86:b7:14:e5:6c:b5: 2f:ff:f6:82:d4:bc:b3:c6:43:ce:01:38:5f:fd:c1: 48:02:bc:78:93:4d:02:c3:22:12:1e:bb:c9:fe:31: fe:28:2f:a8:3f:64:4c:1f:37:6a:b2:e5:d2:90:02: 31:a4:e7:69:d2:00:82:93:5f:6f:2c:10:58:0d:6d: b8:5d:91:3d:b1:d7:0c:55:f4:4f:db:7a:a3:43:42: 5d:4c:07:86:a0:1a:4d:b3:09:94:f1:4a:c6:ad:6d: 45:a4:4e:e4:55:8c:2e:b1:c7:61:a8:20:88:4c:ee: 29:82:d0:08:ee:11:6a:b9:6e:23:dc:e5:07:b8:39: 9a:49:3a:20:2a:7e:83:15:9f:b5:e8:98:53:df:64: 86:a2:4a:75:ea:5d:ec:d9:db:20:c1:d5:cd:ff:cc: db:22:1d:30:46:4a:57:ba:aa:12:6e:6c:66:da:32: a2:56:89:84:50:b9:f1:3b:d8:ec:a9:16:ff:61:a6: d2:8c:99:25:b3:99:3e:f8:01:be:d2:4d:1e:37:67: 02:c3:a6:1e:89:66:e8:51:d9:0a:67:8c:10:91:df: 38:b3:88:54:bf:d9:6d:24:ce:8a:da:9d:56:42:5f: f7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6F:78:7C:3B:42:5D:C9:68:13:88:03:00:C3:1E:2F:C1:49:7A:F5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5/761633ef-0fb8-4855-a42b-c999cd4782b5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 66.196.32.0/20 67.226.217.0/24 161.199.104.0/24 162.142.24.0/21 IPv6: 2605:2040::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396040 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:5d:bd:0f:21:46:71:7d:cc:ec:37:d1:25:44:76:4f:54:ff: 57:99:33:72:47:93:5d:cf:dd:af:e8:fa:bb:25:6e:58:e7:3e: ff:57:0a:23:3e:9d:27:ac:5f:b0:15:e2:f0:aa:ff:87:56:e6: d7:62:d1:a6:54:28:fc:b9:2c:73:76:4d:e5:31:2d:66:94:bd: d5:51:32:ac:f6:cb:3e:8e:a1:03:2e:8a:e4:d7:28:52:39:76: e5:1e:c0:cd:a4:04:0e:ab:62:74:e5:95:c6:ac:93:4b:1f:0c: 53:9a:87:7f:81:b8:c7:3b:5d:39:3c:34:5a:81:5b:5a:e7:6b: 5f:bc:9d:3b:52:9d:e5:78:b1:dd:22:8d:e5:9a:d0:d0:84:b7: d5:e0:bf:4e:c0:3a:45:34:bf:f6:ea:19:3f:57:a2:10:09:f5: b8:42:7c:e4:5d:00:62:97:1c:d1:0d:ff:94:38:67:5b:64:6c: 08:75:44:30:fb:3c:53:b3:a0:8c:c8:e9:91:8a:fc:a5:6b:a9: d5:bd:81:6e:ab:d0:b8:17:2d:c9:32:a4:a9:79:06:3c:7d:0e: f2:f3:df:b8:86:4e:4c:c1:11:39:d9:3f:8c:97:64:2f:71:00: a4:ee:78:5a:b9:79:57:62:bf:fb:33:7f:03:a8:36:36:7b:88: c2:7c:e9:5f -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWEjtZyTDc1gmbmaKPFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIxODIxMDExN1oXDTI3MDUyNDIwMDExN1owLzEtMCsGA1UEAxMk NzYxNjMzZWYtMGZiOC00ODU1LWE0MmItYzk5OWNkNDc4MmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF7bHPx4kVxmDkKEs0Ci7mlcReqWD9CGtxTl bLUv//aC1LyzxkPOAThf/cFIArx4k00CwyISHrvJ/jH+KC+oP2RMHzdqsuXSkAIx pOdp0gCCk19vLBBYDW24XZE9sdcMVfRP23qjQ0JdTAeGoBpNswmU8UrGrW1FpE7k VYwuscdhqCCITO4pgtAI7hFquW4j3OUHuDmaSTogKn6DFZ+16JhT32SGokp16l3s 2dsgwdXN/8zbIh0wRkpXuqoSbmxm2jKiVomEULnxO9jsqRb/YabSjJkls5k++AG+ 0k0eN2cCw6YeiWboUdkKZ4wQkd84s4hUv9ltJM6K2p1WQl/3bQIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFKBveHw7Ql3JaBOIAwDDHi/BSXr1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83 NjE2MzNlZi0wZmI4LTQ4NTUtYTQyYi1jOTk5Y2Q0NzgyYjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzc2MTYzM2VmLTBmYjgtNDg1NS1h NDJiLWM5OTljZDQ3ODJiNS83NjE2MzNlZi0wZmI4LTQ4NTUtYTQyYi1jOTk5Y2Q0 NzgyYjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBARCxCADBABD4tkDBAChx2gDBAOijhgwDQQCAAIw BwMFACYFIEAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgsIMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIFd vQ8hRnF9zOw30SVEdk9U/1eZM3JHk13P3a/o+rslbljnPv9XCiM+nSesX7AV4vCq /4dW5tdi0aZUKPy5LHN2TeUxLWaUvdVRMqz2yz6OoQMuiuTXKFI5duUewM2kBA6r YnTllcask0sfDFOah3+BuMc7XTk8NFqBW1rna1+8nTtSneV4sd0ijeWa0NCEt9Xg v07AOkU0v/bqGT9XohAJ9bhCfORdAGKXHNEN/5Q4Z1tkbAh1RDD7PFOzoIzI6ZGK /KVrqdW9gW6r0LgXLckypKl5Bjx9DvLz37iGTkzBETnZP4yXZC9xAKTueFq5eVdi v/szfwOoNjZ7iMJ86V8= -----END CERTIFICATE-----Generated at Wed Apr 30 05:33:38 2025 by rpki-client